CVE-2021-3816

2022-01-1920:38:50

CWE-79

redhat

www.cve.org

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.9%

JSON

Cacti 1.1.38 allows authenticated users with User Management permissions to inject arbitrary HTML in the group_prefix field during the creation of a new group via “Copy” method at user_group_admin.php.

CNA Affected

[
  {
    "product": "Cacti",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "1.1.38"
      }
    ]
  }
]

References

www.cacti.net/info/changelog